Contact us now

+49 6196 777 54 0

Data Privacy Policy

Data Protection Information
Regarding the Website and Social Media Presence of the Zühlke Group
and the Distribution of Emails by Zühlke

 

Zühlke provides the Zühlke-website and blog (together "website") under the web address zuehlke.com. Furthermore, Zühlke has profiles on different social media platforms. The website and social media profiles are used to inform on products and services of Zühlke as well as Zühlke as an employer. Over the website and social media platforms interested people also have the possibility of contacting Zühlke.

Personal data is processed in connection with the website, the services provided on the website, within the scope of social media platforms used by Zühlke as well as the distribution of emails.

Below you find information on the controller, the representative and the data protection officer of the controller (Section A) as well as on your rights regarding the processing of your personal data (Section B).

Below you also find information on the processing of your personal data (Section C) as well as information on the use of cookies (Section D) in context with the distribution of emails for event invitations, newsletters and information on Zühlke and further services offered by Zühlke.

TABLE OF CONTENTS

A...... Information on the controller 4

I.          Identity and contact details of the controller 4

II.        Identity and contact details of the controller’s representative. 4

III.       Contact details of the controller’s data protection officer 4

B...... Information on the rights of data subjects. 5

I.          Right of access. 5

II.        Right to rectification. 6

III.       Right to erasure (“right to be forgotten”) 6

IV.       Right to restriction of processing. 7

V.        Right to data portability. 7

VI.       Right to object 8

VII.     Right to withdraw consent 9

VIII.    Right to lodge a complaint with a supervisory authority. 9

C...... Information on the processing of personal data. 10

I.          Use of the website for information purposes. 11

II.        Use of web analysis and web tracking technologies on the website. 15

III.       Use of contact forms and download forms on the website. 23

IV.       Use of the email service. 28

D...... Cookies used on this website. 34

E....... Effective date of and changes to this Data Protection Information. 38

 

A.  Information on the controller

I.  Identity and contact details of the controller

Zühlke Engineering AG, Wiesenstrasse 10a, 8952 Schlieren, Schweiz

Zühlke Engineering GmbH, Düsseldorfer Str. 38, 65760 Eschborn, Deutschland

Zühlke Engineering (Austria) GmbH, Rivergate, Handelskai 92, 1200 Wien, Österreich

Zuhlke Engineering Ltd, 80 Great Eastern Street, London EC2A 3JL, United Kingdom

II. Identity and contact details of the controller’s representative

III.  Contact details of the controller’s data protection officer


Thasanee Patkom, Wiesenstrasse 10a, 8952 Schlieren (Zuerich), Switzerland, phone: +41 43 216 6677 

B.  Information on the rights of data subjects

As a data subject, you have the following rights with regard to the processing of your personal data:

  • Right of access (Article 15 of the General Data Protection Regulation)
  • Right to rectification (Article 16 of the General Data Protection Regulation)
  • Right to erasure (“right to be forgotten”) (Article 17 of the General Data Protection Regulation)
  • Right to restriction of processing (Article 18 of the General Data Protection Regulation)
  • Right to data portability (Article 20 of the General Data Protection Regulation)
  • Right to object (Article 21 of the General Data Protection Regulation)
  • Right to withdraw consent (Article 7 paragraph 3 of the General Data Protection Regulation)
  • Right to lodge a complaint with a supervisory authority (Article 57 paragraph 1 point f of the General Data Protection Regulation)

You may contact our data protection officer (Section A.III.) for the purpose of exercising your rights.

Where applicable, you find information on any specific modalities and mechanisms which facilitate the exercise of your rights, in particular the exercise of your rights to data portability and to object, in the information on the processing of personal data in Section C of this Data Protection Information.

Below you find more detailed information on your rights with regard to the processing of your personal data:

I.  Right of access

As a data subject, you have a right to obtain access and information under the conditions provided in Article 15 of the General Data Protection Regulation.

This means in particular that you have the right to obtain confirmation from us as to whether we are processing your personal data. If so, you also have the right to obtain access to the personal data and the information listed in Article 15 paragraph 1 of the General Data Protection Regulation. This includes information regarding the purposes of the processing, the categories of personal data that are being processed and the recipients or categories of recipients to whom the personal data have been or will be disclosed (points (a), (b) and (c) of Article 15 paragraph 1 of the General Data Protection Regulation).

You can find the full extent of your right to access and information in Article 15 of the General Data Protection Regulation, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

II.  Right to rectification

As a data subject, you have the right to rectification under the conditions provided in Article 16 of the General Data Protection Regulation.

This means in particular that you have the right to receive from us without undue delay the rectification of inaccuracies in your personal data and completion of incomplete personal data.

You can find the full extent of your right to rectification in Article 16 of the GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

III.  Right to erasure (“right to be forgotten”)

As a data subject, you have a right to erasure (“right to be forgotten”) under the conditions provided in Article 17 of the General Data Protection Regulation.

This means that you have the right to obtain from us the erasure of your personal data and we are obliged to erase your personal data without undue delay when one of the reasons listed in Article 17 paragraph 1 of the General Data Protection Regulation applies. This can be the case, for example, if personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed (point (a) of Article 17 paragraph 1 of the General Data Protection Regulation).

If we have made the personal data public and are obliged to erase it, we are also obliged, taking account of available technology and the cost of implementation, to take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of those personal data (Article 17 paragraph 2 of the General Data Protection Regulation).   

The right to erasure (“right to be forgotten”) does not apply if the processing is necessary for one of the reasons listed in Article 17 paragraph 3 of the General Data Protection Regulation. This can be the case, for example, if the processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims (points (a) and (4) of Article 17 paragraph 3 of the General Data Protection Regulation).

You can find the full extent of your right to erasure (“right to be forgotten”) in Article 17 of the GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

IV.  Right to restriction of processing

As a data subject, you have a right to restriction of processing under the conditions provided in Article 18 of the General Data Protection Regulation.

This means that you have the right to obtain from us the restriction of processing if one of the conditions provided in Article 18 paragraph 1 of the General Data Protection Regulation applies. This can be the case, for example, if you contest the accuracy of the personal data. In such a case, the restriction of processing lasts for a period that enables us to verify the accuracy of the personal data (point (a) of Article 18 paragraph 1 of the General Data Protection Regulation).

Restriction means that stored personal data are marked with the goal of restricting their future processing (Article 4 paragraph 3 of the General Data Protection Regulation).

You can find the full extent of your right to restriction of processing in Article 18 of the GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

V.  Right to data portability

As a data subject, you have a right to data portability under the conditions provided in Article 20 of the General Data Protection Regulation.

This means that you generally have the right to receive your personal data with which you have provided us in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us if the processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation or on a contract pursuant to point (b) of Article 6 paragraph 1 of the General Data Protection Regulation and the processing is carried out by automated means (Article 20 paragraph 1 of the General Data Protection Regulation).

You can find information as to whether an instance of processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation or on a contract pursuant to point (b) of Article 6 paragraph 1 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.

In exercising your right to data portability, you also generally have the right to have your personal data transmitted directly from us to another controller if technically feasible (Article 20 paragraph 2 of the General Data Protection Regulation).

You can find the full extent of your right to data portability in Article 20 of the General Data Protection Regulation, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

VI.  Right to object

As a data subject, you have a right to object under the conditions provided in Article 21 of the General Data Protection Regulation.

At the latest in our first communication with you, we expressly inform you of your right, as a data subject, to object.  

More detailed information on this is given below:

1.  Right to object on grounds relating to the particular situation of the data subject

As a data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6 paragraph 1, including profiling based on those provisions.

You can find information as to whether an instance of processing is based on point (e) or (f) of Article 6 paragraph 1 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.

In the event of an objection relating to your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

You can find the full extent of your right to objection in Article 21 of the General Data Protection Regulation, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

2.  Right to object to direct marketing

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

You can find information as to whether and to what extent personal data are processed for direct marketing purposes in the information regarding the legal basis of processing in Section C of this Data Protection Information.

If you object to processing for direct marketing purposes, we no longer process your personal data for these purposes.

You can find the full extent of your right to objection in Article 21 of the General Data Protection Regulation, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

3.  Right to withdraw consent

Where an instance of processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation, as a data subject, you have the right, pursuant to Article 7 paragraph 3 of the General Data Protection Regulation, to withdraw your consent at any time. The withdrawal of your consent does not affect the legitimacy of the processing that occurred based on your consent until the withdrawal. We inform you of this before you grant your consent.

You can find information as to whether an instance of processing is based on point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.

4.  Right to lodge a complaint with a supervisory authority

As a data subject, you have a right to lodge a complaint with a supervisory authority under the conditions provided in point (f) of Article 57 paragraph 1 of the General Data Protection Regulation.

C.  Information on the processing of personal data

In context with the website and the offers provided on the website, as well as in connection with social media appearances and the distribution of newsletters, different personal data are processed for different purposes.

Insofar as we, as controller, alone or jointly with others, determine the purposes and means of the processing of personal data, you will find information below in particular on

  • the personal data or categories of personal data concerned,
  • the purposes for which the personal data are intended to be processed,
  • the legal basis for the processing and, where the processing is based on point (f) of Article 6 paragraph 1 of the General Data Protection Regulation, the legitimate interests pursued by us or by a third party,
  • the recipients or categories of recipients of the personal data, if any,
  • where applicable, the fact that we intend to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the EU Commission, or in the case of transfers referred to in Article 46 or 47 of the General Data Protection Regulation, or the second subparagraph of Article 49 paragraph 1 of the General Data Protection Regulation, reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available,
  • the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period,

Where we obtain your personal data from you as the data subject, you also find below information on whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failure to provide such data.

Where we do not obtain personal data from you as the data subject, you will also find below information on from which source the personal data originate, and if applicable, whether it came from publicly accessible sources.

I.  Use of the website for information purposes

In the case of purely informational use of the website, the browser used on your end device will, for technical reasons, send certain information, such as your IP address, to the server on which our website is located. We process this information in order to be able to provide you with the content of the website you have requested. To ensure the security of the IT infrastructure used for the provision of the website, this information is also stored temporarily in a so-called web server log file.

In order to make it possible for you to use the website for the purpose of obtaining information, we make use of cookies on the website (à section D of this data protection information), as a result of which personal data are processed.

More detailed information about this is available below:

​​​​​​​1.  Details about the personal data processed

Categories of personal data processed

Personal data included in the categories

Sources of the data

Obligation to provide the data

Storage period

Protocol data that are accrued via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons ("HTTP data") when the website is called up.

 

IP address, type and version of your internet browser, operating system used, the page called up, the site previously visited, (referrer URL), date and time of the visit.

 

User of the website as a data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to make data available.

If the data are not made available, we cannot make the requested website content available.

Data are stored in server log files in a form that enables identification of the data subject for a maximum period of 30 days, unless a security-related incident occurs (e.g. a DDoS attack).

In the event of a security-related incident, the server log files will be stored until the security-related incident has been eliminated and fully resolved.

Data stored on the end user's device in strictly required cookies (à section D) for the administration of cookie consents for this website ("opt-in cookie data")

 

Consent and, if applicable, your individual selection for the use of cookies on your device.

 

User of the website as a data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to make data available.

In the case of non-provision of data, we cannot take into account cookie consent on this website.

We do not save these data on our systems.

See section D regarding the period of validity of the cookies

 

Data stored on the end user's device in strictly required cookies (à section D) for the provision of functions that provide information ("cookie data")

 

Settings for language and country, information for site navigation

User of the website as a data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to make data available.

If the data are not made available, we cannot make the requested website content available.

We do not save these data on our systems.

See section D regarding the period of validity of the cookies

 

​​​​​​​​​​​​​​2.  Details about the processing of personal data

Purposes of the processing of the personal data

Categories of personal data processed

Automated decision-making

Legal basis and, where applicable, legitimate interests

Recipients

For the provision of the website content called up by the user, HTTP data are temporarily processed on our web server.

HTTP data.

 

No automated decision-making takes place.

Balancing of interests (article 6 (1) section f of the General Data Protection Regulation). Our legitimate interest is the provision of the website content called up by the user.

Marketing-Communications departments (MarCom), hosting provider.

 

To ensure the security of the IT infrastructure used to provide the website, in particular for the identification, elimination and evidential documentation of disruptions (such as DDoS attacks), HTTP data are temporarily processed in web server log files.

 

HTTP data.

No automated decision-making takes place.

Balancing of interests (article 6 (1) section f of the General Data Protection Regulation). Our legitimate interest is ensuring the security of the IT infrastructure used to provide the website, in particular for the identification, elimination and evidential documentation of disruptions (such as DDoS attacks).

Marketing-Communications departments (MarCom), hosting provider.

To provide the administration of the cookie consent for this website, data from strictly required cookies (à section D) are temporarily processed on our web server, in order to determine if you have already given consent when you visit the website again.

Opt-in cookie data.

 

No automated decision-making takes place.

Balancing of interests (article 6 (1) section f of the General Data Protection Regulation). Our legitimate interest is the administration of the cookie consents for this website provided by users.

Marketing-Communications departments (MarCom), hosting provider.

To provide the informational function, data from cookies (à section D) are temporarily processed on our web server.

 

Cookie data

No automated decision-making takes place.

Balancing of interests (article 6 (1) section f of the General Data Protection Regulation). Our legitimate interest is  the provision of the website's functions for making available information called up by the user.

Marketing-Communications departments (MarCom), hosting provider.

 

​​​​​​​​​​​​​​3.  Details of the recipients of personal data and the transfer of personal data to third countries and/or to international organisations

Recipient

Recipient’s role

Recipient’s location

Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations

Marketing-Communications departments (MarCom)

Division of the controller

Zühlke Engineering AG (ZCH): Switzerland
Zühlke Engineering GmbH (ZDE): Germany
Zühlke Engineering GmbH (ZAT): Austria
Zuhlke Engineering Ltd. (ZUK): Great Britain

Adequacy decision: http://eur-lex.europa.eu/legal-content/DE/ALL/?uri=CELEX%3A32000D0518

Hosting provider

Nine Internet Solutions AG

Albisriederstrasse 243a
8047 Zürich
Switzerland

Data processor

Switzerland

Adequacy decision for Zühlke Engineering AG Switzerland:http://eur-lex.europa.eu/legal-content/DE/ALL/?uri=CELEX%3A32000D0518

​​​​​​​II.  Use of web analysis and web tracking technologies on the website 

If you have given your consent for this, we will use web analysis technologies on the website using cookies (à section D of this data protection information) to record and analyse the user behaviour on our website in order to improve the website and better achieve the goals of the website (e. g. frequency of visits, increase in page views).

If you have given your consent for this, we will also use web tracking technologies using cookies (à section D of this data protection information) to record and analyse the user behaviour on our website for the purposes of (conversion) tracking and (re) targeting.

More detailed information about this is available below:

​​​​​​​1.  Details about the personal data processed

Categories of personal data processed

Personal data included in the categories

Sources of the data

Obligation to provide the data

Storage period

Google Analytics

Protocol data that are accrued via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons when using the web analysis tool Google Analytics on this website ("Google Analytics HTTP data").

 

IP address, type and version of your internet browser, operating system used, the page called up, the site previously visited, (referrer URL), date and time of the visit.

 

User of the website as a data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to make data available.

In the case of non-provision of the data, we cannot perform a web analysis.

On this website, so-called IP anonymisation is activated for the use of the web analysis tool Google Analytics. This means that the IP address transmitted by the browser for technical reasons is anonymised prior to storage by truncating the IP address (by deleting the last octet of the IP address).

Data that are stored in cookies (à section D) for the web analysis tool Google Analytics on the user's end device ("Google Analytics cookie data").

 

Unique visitor ID for recognising repeat visitors, number of visitor visits, time of first visit, previous visits, and current visit, start and expected end of current visit, visitor category to which a user belongs, source or campaign that explains how a user came to the website.

User of the website as a data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to provide the data.

In the case of non-provision of the data, we cannot perform a web analysis.

We do not save these data on our systems.

See section D regarding the period of validity of the cookies

 

Data collected by the Google Analytics web analysis tool and stored in pseudonymous usage profiles ("Google Analytics Profile Data").

 

Data about the use of the website, in particular page views, call frequency and length of stay on the accessed pages.

 

Independently generated.

-

We do not save these data on our systems.

Google Adwords

Protocol data that are accrued via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons when using the web tracking tool Google Adwords on this website ("Google Adwords HTTP data").

 

IP address, type and version of your internet browser, operating system used, the page called up, the site previously visited, (referrer URL), date and time of the visit.

User of the website as a data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to make data available.

In the case of non-provision of the data, we cannot perform web tracking.

On this website, so-called IP anonymisation is activated for the use of the web tracking tool Google Adwords. This means that the IP address transmitted by the browser for technical reasons is anonymised by truncating the IP address (by deleting the last octet of the IP address).

 

Data that are stored in cookies (à section D) for the web tracking tool Google Adwords on the user's end device ("Google Analytics cookie data").

 

Unique visitor ID for recognising returning visitors.

 

User of the website as a data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to provide the data.

In the case of non-provision of the data, we cannot perform web tracking.

We do not save these data on our systems.

See section D regarding the period of validity of the cookies

 

Data collected by the "Google Adwords" web tracking tool and stored in pseudonymous usage profiles ("Google Adwords Profile Data").

 

Data about the use of the website, in particular page views, call frequency and length of stay on the accessed pages.

 

Independently generated.

-

We do not save these data on our systems.

 

​​​​​​​2.  Details about the processing of personal data

Purposes of the processing of the personal data

Categories of personal data processed

Automated decision-making

Legal basis and, where applicable, legitimate interests

Recipients

To improve the website and better achieve the website goals (e. g. frequency of visits, increase in the number of page views), the behaviour of users on our website is recorded and analysed in a pseudonymised form. Users of the website are marked in a pseudonymous form, so that they can be recognised by the website when visiting again. Pseudonymous usage profiles are created from this information. The pseudonymous usage profiles are not merged with data about the person behind the pseudonym. The aim of the procedure is to investigate where the users come from, which areas on the website are visited and how often and for how long which pages and categories are viewed.

For this purpose, cookies (à section D) for the "Google Analytics" web analysis tool are used.

Google Analytics HTTP data, Google Analytics cookie data, Google Analytics profile data.

 

No automated decision-making takes place.

 

Consent (article 6 (1) point a of the General Data Protection Regulation).

Marketing-Communications departments (MarCom), Google

 

For assessing visitor actions (conversion tracking), the behaviour of users on our website is recorded and analysed in a pseudonymised form. Users of the website are marked in a pseudonymous form, so that they can be recognised by the website when visiting again. Pseudonymous usage profiles are created from this information. The pseudonymous usage profiles are not merged with data about the person behind the pseudonym. The aim of the procedure is to measure the effectiveness with which an addressed group of people is induced to carry out desired actions.

For this purpose, cookies (à section D) for the "Google Adwords" web tracking tool are used.

 

Google Adwords HTTP data, Google Adwords cookie data, Google Adwords profile data.

 

No automated decision-making takes place.

 

Consent (article 6 (1) point a of the General Data Protection Regulation).

Marketing-Communications departments (MarCom), Google

 

For the targeted addressing of website users ((re-) targeting), the behaviour of users on our website is recorded and analysed in a pseudonymised form. Users of the website are marked in a pseudonymous form, so that they can be recognised by the website or another website. Pseudonymous usage profiles are created from this information. The pseudonymous usage profiles are not merged with data about the person behind the pseudonym. The aim of the process is to attract the attention of a user who has already shown an interest in a website or product and remind them about this website or product, in order to increase the advertising relevance and thus the click and conversion rate (e.g. order rate).

For this purpose, cookies (à section D) for the "Google Adwords" web tracking tool are used.

Google Adwords HTTP data, Google Adwords cookie data, Google Adwords profile data

No automated decision-making takes place.

 

Consent (article 6 (1) point a of the General Data Protection Regulation).

Marketing-Communications department (MarCom), Google

​​​​​​​​​​​​​​3.  Details of the recipients of personal data and the transfer of personal data to third countries and/or to international organisations

Recipient

Recipient’s role

Recipient’s location

Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations

Marketing-Communications departments (MarCom)

Division of the controller

Zühlke Engineering AG (ZCH): Switzerland
Zühlke Engineering GmbH (ZDE): Germany
Zühlke Engineering GmbH (ZAT): Austria
Zuhlke Engineering Ltd. (ZUK): Great Britain

Adequacy decision: http://eur-lex.europa.eu/legal-content/DE/ALL/?uri=CELEX%3A32000D0518

Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA ("Google")

 

Data processor

USA

Adequacy decision:https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=uriserv%3AOJ.L_.2016.207.01.0001.01.DEU

​​​​​​​III.  Use of contact forms and download forms on the website 

On the website, we offer you the opportunity to contact us via contact forms. It is also possible to download materials provided by us, via download forms. We process the information provided by you in such forms in order to meet your request.

More detailed information about this is available below:

​​​​​​​1.  Details about the personal data processed

Categories of personal data processed

Personal data included in the categories

Sources of the data

Obligation to provide the data

Storage period

Protocol data that is accrued via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons ("HTTP data") when forms on the website are called up.

 

IP address, type and version of your internet browser, operating system used, the page called up, the site previously visited, (referrer URL), date and time of the visit.

 

User of the website as a data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to make data available.

If the data are not made available, we cannot make the requested website content available.

Data are stored in server log files in a form that enables identification of the data subject for a maximum period of 7 days, unless a security-related incident occurs (e.g. a DDoS attack).

In the event of a security-related incident, the server log files will be stored until the security-related incident has been eliminated and fully resolved.

Data that you provide to us via contact forms on the website ("Contact form data").

 

This includes the information that you provide us with via the respective contact form on the website. This may include the following data in particular: Surname, first name, gender, address, position and department, company, sector, telephone number, email address as well as the subject and content of your request.

 

User of the website as a data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to provide the data.

In the case of non-provision of data, we cannot process your request.

Data are stored until your request has been fulfilled.

Beyond this, we also store these data for evidentiary purposes, for the establishment, exercise or defence of possible legal claims, for a transition period of three years from the end of the year in which you provided us with the data and until any legal disputes have been concluded.

In addition, we store these data for longer if relevant legal retention periods, especially pursuant to commercial and tax law, are defined. Depending on the type of documents, there may be commercial and tax-related retention obligations of up to ten years.

Data that you provide to us via download forms on the website ("Download form data").

 

This includes the information that you provide us with via the respective download form on the website. This may include the following data in particular: Name, email address and details of the material requested for download by you.

User of the website as a data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to make data available.

If the data are not provided, we will not be able to provide you with the materials you requested for download.

 

Data are stored until your request has been fulfilled.

Beyond this, we also store these data for evidentiary purposes, for the establishment, exercise or defence of possible legal claims, for a transition period of three years from the end of the year in which you provided us with the data and until any legal disputes have been concluded.

In addition, we store these data for longer if relevant legal retention periods, especially pursuant to commercial and tax law, are defined. Depending on the type of documents, there may be commercial and tax-related retention obligations of up to ten years.

 

​​​​​​​​​​​​​​2.  Details about the processing of personal data

Purposes of the processing of the personal data

Categories of personal data processed

Automated decision-making

Legal basis and, where applicable, legitimate interests

Recipients

For the provision of our forms on the website, HTTP data are temporarily processed on our web server.

 

HTTP data.

 

No automated decision-making takes place.

Balancing of interests (article 6 (1) section f of the General Data Protection Regulation). Our legitimate interest is the provision of the website content called up by the user.

Marketing-Communications departments (MarCom), hosting provider.

 

Processing of the request about which you contact us via the respective form.

 

Contact form data, download form data

 

No automated decision-making takes place.

If your request concerns a contract of which you are a contractual party or concerns the implementation of pre-contractual measures: Article 6 (1) point f of the General Data Protection Regulation.

Otherwise: Balancing of interests (article 6 (1) point f of the General Data Protection Regulation). In this case, our legitimate interest is the processing of your request.

Marketing-Communications departments (MarCom)

 

Storing and processing for evidentiary purposes for the establishment, exercise or defence of possible legal claims.

 

Contact form data, download form data

 

No automated decision-making takes place.

Balancing of interests (article 6 (1) section f of the General Data Protection Regulation). Our legitimate interest is the establishment, exercise or defence of legal claims.

Marketing-Communications departments (MarCom)

Storage of data for fulfilling legal, especially commercial and tax law-related, retention requirements.

Depending on the type of documents, there may be commercial and tax-related retention obligations of up to ten years.

Contact form data, download form data

 

No automated decision-making takes place.

Fulfillment of a legal obligation (Article 6 (1) point c of the General Data Protection Regulation).

Marketing-Communications departments (MarCom)

 

 

​​​​​​​3.  Details of the recipients of personal data and the transfer of personal data to third countries and/or to international organisations

Recipient

Recipient’s role

Recipient’s location

Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations

Marketing-Communications departments (MarCom)

Division of the controller

Zühlke Engineering AG (ZCH): Switzerland
Zühlke Engineering GmbH (ZDE): Germany
Zühlke Engineering GmbH (ZAT): Austria
Zuhlke Engineering Ltd. (ZUK): Great Britain

Adequacy decision: http://eur-lex.europa.eu/legal-content/DE/ALL/?uri=CELEX%3A32000D0518

Hosting provider

Nine Internet Solutions AG

Albisriederstrasse 243a
8047 Zürich
Switzerland

Data processor

Switzerland

Adequacy decision for Zühlke Engineering AG Switzerland:http://eur-lex.europa.eu/legal-content/DE/ALL/?uri=CELEX%3A32000D0518

 

 

IV.  Use of the email service

We offer you several ways to register to receive emails. You have the option to register to receive our emails on the website. Alternatively, we may have met you at an event, during which you supplied your business contact details to us.

When you register to receive emails, certain items of information are collected, such as your email address, for example. We process this information for the purpose of sending emails containing invitations to events, information about Zühlke and other offers from Zühlke.

More detailed information about this is available below:

​​​​​​​​​​​​​​1.  Details on the personal data processed

Categories of personal data processed

Personal data included in the categories

Sources of the data

Obligation to provide the data

Storage period

Protocol data that is accrued via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons ("HTTP data") when the form for subscribing to or unsubscribing from our newsletter is called up on the website.

 

IP address, type and version of your internet browser, operating system used, the page called up, the page previously visited, (referrer URL), date and time of the page being called up.

 

User of the website as data subject.

It is not legally or contractually stipulated that data must be provided and this is not required for the conclusion of a contract. There is no obligation to provide the data.

If the data is not provided, we cannot provide the requested website content.

Data is stored in server log files in a form that enables identification of the data subject for a maximum period of 7 days, unless a security-related incident occurs (e.g. a DDoS attack).

In the event of a security-related incident, the server log files will be stored until the security-related incident has been eliminated and fully resolved.

Data that we record when you register to receive emails or that you supply to us, e.g. within the framework of events ("subscription data").

 

Mandatory information: Surname, first name, company, email address.

Optional information: telephone number, fax number, position in the company, source of knowledge about the newsletter.

Email subscribers.

Provision of the data is generally voluntary.

If you do not provide the mandatory information, we cannot send you any information by email.

We store this data for as long as you subscribe to our newsletter.

Beyond this, we also store this data for evidentiary purposes, for the establishment, exercise or defence of possible legal claims, for a transition period of three years from the end of the year in which you registered for the newsletter and until any legal disputes have been concluded.

 

Protocol data that is accrued for technical reasons when you subscribe to or unsubscribe from receiving emails ("subscription and unsubscription data").

 

Date and time of the subscription to receive emails, date and time of confirmation of the subscription in the double opt-in process and the IP address of the device used for confirmation, date and time of any unsubscription from the email service.

 

Parties interested in receiving emails containing event invitations, newsletters, information about Zühlke and other offers from Zühlke, such as training courses, for example.

It is not legally or contractually stipulated that data must be provided and this is not required for the conclusion of a contract. There is no obligation to provide the data.

If you do not provide the data, we cannot send you any information by email.

We store this data for as long as you have subscribed or agreed to receive emails.

Beyond this, we also store this data for evidentiary purposes, for the establishment, exercise or defence of possible legal claims, for a transition period of three years from the end of the year in which you registered for the newsletter and until any legal disputes have been concluded.

 

​​​​​​​​​​​​​​2.  Details on the processing of the personal data

Purposes of the processing of the personal data

Categories of personal data processed

Automated decision-making

Legal basis and, where applicable, legitimate interests

Recipients

In order for the form for subscription to and unsubscription from our newsletter to be made available on the website, HTTP data is temporarily processed on our web server.

 

 

HTTP data.

 

No automated decision-making takes place.

Balancing of interests (article 6 (1) section f of the General Data Protection Regulation). Our legitimate interest is the provision of the website content called up by the user.

Marketing Communications Department (MarCom) of the relevant Zühlke company with which you have subscribed, the hosting provider.

 

Double opt-in process for confirmation of the request to receive emails (subscription).

For this purpose, we send an email message to the email address supplied, requesting confirmation. A subscription only comes into effect when the subscriber confirms the email address by clicking on the confirmation link contained in the email.

 

Subscription data, registration and deregistration data.

 

No automated decision-making takes place.

Balancing of interests (article 6 (1) section f of the General Data Protection Regulation). Our legitimate interest is the legally secure documentation of your consent to receive the newsletter.

Marketing Communications Department (MarCom) of the relevant Zühlke company with which you have registered, email campaign management provider

 

Sending of emails containing event invitations, newsletters, information about Zühlke and other offers from Zühlke, such as training courses, for example.

 

We use an external provider's email campaign management system for the administration and sending of emails.

 

We use the optional information supplied upon registration to customise the design of the newsletter and to select information that is relevant to the specific recipient.

 

Subscription data, registration and deregistration data.

No automated decision-making takes place.

Consent (article 6 (1) section a of the General Data Protection Regulation).

Marketing Communications Department (MarCom) of the relevant Zühlke company with which you have registered, email campaign management provider

 

Storing and processing for evidentiary purposes for the establishment, exercise or defence of possible legal claims.

Subscription data, registration and deregistration data.

 

No automated decision-making takes place.

Balancing of interests (article 6 (1) section f of the General Data Protection Regulation). Our legitimate interest is the establishment, exercise or defence of legal claims.

Marketing Communications Department (MarCom) of the relevant Zühlke company with which you have registered, email campaign management provider

 

 

​​​​​​​​​​​​​​3.  Details on the recipients of the personal data and details on the transfer of personal data to a third country and/or international organisation

Recipient

Recipient’s role

Recipient’s location

Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations

Marketing Communications Department (MarCom) of the relevant country

Division of the data controller

Zühlke Engineering AG (ZCH): Switzerland
 Zühlke Engineering GmbH (ZDE): Germany
 Zühlke Engineering GmbH (ZAT): Austria
 Zuhlke Engineering Ltd. (ZUK): England

Adequacy decision for Zühlke Engineering AG Switzerland: http://eur-lex.europa.eu/legal-content/DE/ALL/?uri=CELEX%3A32000D0518

 

Hosting provider

Nine Internet Solutions AG
Albisriederstrasse 243a
8047 Zürich

 Switzerland

 

Data processor

Switzerland

Adequacy decision for Zühlke Engineering AG Switzerland:http://eur-lex.europa.eu/legal-content/DE/ALL/?uri=CELEX%3A32000D0518

Email campaign management provider for ZCH, ZDE, ZAT

Episerver Germany
Wallstraße 16
10179 Berlin
Germany

Data processor

Germany

-

 Email campaign management provider for ZUK (Mailchimp)

The Rocket Science Group, LLC
675 Ponce de Leon Ave NE
Suite 5000
Atlanta, GA 30308
USA

Data processor

USA

Adequacy decision:https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=uriserv%3AOJ.L_.2016.207.01.0001.01.DEU

D.  Cookies used on this website

The following cookies may be used on this website:

Identifier

First Party / Third Party

Purpose and content

Period of validity

Consent Required

Opt-in cookies

cookie_policy

First Party

Strictly required cookie for saving your consent and, where applicable, your individual selection for the use of cookies on your device, to determine whether you have already given consent when you visit the website again.

 

Persistent:
1 year.

No.

Google Analytics cookies

__ga

First Party

Use of the Google Analytics web analysis tool for collecting and analysing the usage behaviour on our website in order to improve the website (à section C of this data protection information).

This cookie is used to differentiate visitors

Persistent:
2 years.

 

Yes.

__gid

First Party

Use of the Google Analytics web analysis tool for collecting and analysing the usage behaviour on our website in order to improve the website (à section C of this data protection information).

This cookie is used to differentiate visitors

Persistent:

24 hours

Yes.

__gat

First Party

Use of the Google Analytics web analysis tool for collecting and analysing the usage behaviour on our website in order to improve the website (à section C of this data protection information).

This cookie is used to reduce the number of requests

Transient:

1 minute

Yes.

ShareThis cookies

stid_unam

First Party

These cookies are used by the ShareThis widget. The ShareThis widget allows the user to share content on various social media. No personal information is stored.

Persistent:

1 year

Yes.

_uset

First Party

These cookies are used by the ShareThis widget. The ShareThis widget allows the user to share content on various social media. No personal information is stored.

Persistent:

8 hours

Yes.

_UID_UIDR

First Party

These cookies are used by the ShareThis widget. The ShareThis widget allows the user to share content on various social media. No personal information is stored.

Persistent:

2 years

Yes.

Other cookies

django_language

First Party

Strictly required cookie for providing the website.

Persistent:

1 year

No.

multisite_country_id

First Party

Strictly required cookie for providing the website.

Persistent:

1 year

No.

breadcrumb

First Party

Strictly required cookie for providing the website.

Transient:

Until the end of the session

No

search_url

First Party

Strictly required cookie for providing the website.

Transient:

Until the end of the session

No

sessionid

Fi
rst Party

Strictly required cookie for providing the website.

Transient:

Until the end of the session

No

 

Wintrgarden Cookies

 

Identifier First Party / Third Party Purpose and content Period of validity Consent Required

JSESSIONID

First Party

Session cookie: Identifies current user. Used for session tracking and request authentication.

Transient:

Up to end of session

No

locale_v*

First Party

Locale cookie: Stores the selected locale to use for rendering the content.

Transient:

Up to end of session

No

locale_campaign_v*_*

First Party

Campaign specific locale cookie: Stores the selected locale for the "Self-registration process" pages.

Transient:

Up to end of session

No

requestedStateData_v*

First Party

Stores requested url path to restricted area before login to be able to redirect to it after login.

Transient:

Up to end of session

No

page_info_v*_email.*

First Party

Stores the latest paging information for each mail box section in email section.

Transient:

Up to end of session

No

WGTRM-XSRF-TOKEN

First Party

Keeps the anti CSRF token used for protection against request forgery attacks.

Transient:

Up to end of session

No

 

E. Effective date of and changes to this Data Protection Information

The effective date of this Data Protection Information is May 16th, 2018.

It may be necessary to modify this Data Protection Information due to technical developments and/or amendment of statutory or official requirements.

An up-to-date version of this Data Protection Information can be retrieved at any time at https://www.zuehlke.com/de/en/privacy-policy/.